This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer File: c2MktbTBPXYGw5LDdONbvmSiTlA.cer (raw, json) Hash identifier: DS/YqCVGWgEi8NUesEk8m7e0Vo6w6emZE/uoLgD5jec= Subject key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA437B77332166C68B7A6FE233A97F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.36.96.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:37:b7:73:32:16:6c:68:b7:a6:fe:23:3a:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:91:3e:b3:9e:cc:31:fb:2d:81:06:ef:ab: 96:34:2f:38:44:d5:20:21:19:a7:36:b7:e8:49:0d: 28:6b:6a:86:cc:d8:66:0a:67:96:8e:53:c2:88:70: 61:95:cb:a3:98:5d:b6:89:0e:64:54:1b:49:84:f5: d2:14:38:f8:41:4f:0e:6f:74:cd:9d:ba:b4:e6:5d: 0d:22:c0:3e:25:80:de:83:58:bf:28:9f:7d:4e:a0: 3c:59:f3:d2:b1:79:c3:e2:c3:13:77:e9:27:00:ff: d9:78:c6:f3:40:17:fe:12:65:4f:52:ef:32:67:b2: a9:db:e8:29:0e:15:1c:04:19:bc:94:8f:d7:90:78: 67:e4:ca:6d:95:a3:a7:a7:08:5a:7d:66:02:26:19: 34:24:1f:8b:33:00:7e:0e:77:74:e4:95:42:f7:20: 58:d4:e3:46:14:24:5a:d2:18:e2:f3:62:e7:0f:16: ad:68:57:c6:5b:7c:d1:0e:e0:43:f1:50:ff:cd:cf: 8e:17:ee:be:96:db:96:93:df:a9:4b:53:aa:33:22: f1:a5:4d:df:50:6b:a0:50:ba:38:89:f2:16:0c:8b: 43:d0:9b:30:62:4a:fe:59:c5:aa:03:96:8a:55:7e: 35:b3:7d:1e:18:80:ed:a8:ec:b1:5f:96:4b:96:1c: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.36.96.0/19 Signature Algorithm: sha256WithRSAEncryption 25:1d:16:d2:5f:1c:18:a3:7f:c1:e1:d6:f8:e1:41:cd:5b:0d: 84:eb:2a:e6:d0:38:44:8d:ec:60:67:b1:a7:58:e0:66:4a:d9: 53:e6:01:d9:01:cc:ac:1d:d5:ee:b5:c7:58:eb:71:c2:81:18: 01:cf:4d:b1:4b:41:ff:df:ef:71:e6:4d:4a:52:f7:c5:31:f6: 2f:71:76:b5:6b:96:ed:58:6f:cf:65:9f:17:db:9a:23:42:35: 38:60:f8:59:38:ef:6a:5d:21:b3:e4:81:ef:1d:72:8f:28:2a: af:da:eb:f1:1b:aa:dd:0d:ff:e2:f2:d6:e7:ee:f9:78:7e:63: 61:01:d0:02:09:ee:f1:11:df:b8:99:5e:66:9f:8c:b0:ec:e2: e7:b7:6e:fd:9b:ce:42:4a:db:28:08:44:72:5e:2c:79:0b:a1: 66:38:af:2c:b8:37:6a:99:a7:35:a5:a3:6b:dd:03:8c:9e:dc: fc:55:b0:bf:ff:6e:ad:1d:04:51:b0:58:69:fe:5a:05:80:1f: e8:c2:fb:ae:e8:8e:d2:1c:c0:f9:fa:25:d3:32:8e:84:f0:5f: ad:0c:05:a8:b4:47:00:1d:69:46:2d:66:98:8d:24:aa:36:3e: 3b:7b:9f:72:41:0e:e4:13:9c:1f:b4:3b:ad:6d:09:07:23:c9: 52:1d:ef:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pDe3czIWbGi3pv4jOpfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzYzMjRiNWI0YzEzZDc2MDZjMzkyYzM3NGUzNWJiZTY0YTI0ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUKRPrOezDH7LYEG76uWNC84RNUg IRmnNrfoSQ0oa2qGzNhmCmeWjlPCiHBhlcujmF22iQ5kVBtJhPXSFDj4QU8Ob3TN nbq05l0NIsA+JYDeg1i/KJ99TqA8WfPSsXnD4sMTd+knAP/ZeMbzQBf+EmVPUu8y Z7Kp2+gpDhUcBBm8lI/XkHhn5MptlaOnpwhafWYCJhk0JB+LMwB+Dnd05JVC9yBY 1ONGFCRa0hji82LnDxataFfGW3zRDuBD8VD/zc+OF+6+ltuWk9+pS1OqMyLxpU3f UGugULo4ifIWDItD0JswYkr+WcWqA5aKVX41s30eGIDtqOyxX5ZLlhzLuQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHNjJLW0wT12BsOSw3TjW75kok5QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2ZhYjNi MS0wOWUyLTRlODItOTVhNi1lYWU4YTMwNTcxNTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZmFiM2Ix LTA5ZTItNGU4Mi05NWE2LWVhZThhMzA1NzE1OS8xL2MyTWt0YlRCUFhZR3c1TERk T05idm1TaVRsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQF1CRgMA0GCSqGSIb3DQEBCwUAA4IBAQAlHRbS XxwYo3/B4db44UHNWw2E6yrm0DhEjexgZ7GnWOBmStlT5gHZAcysHdXutcdY63HC gRgBz02xS0H/3+9x5k1KUvfFMfYvcXa1a5btWG/PZZ8X25ojQjU4YPhZOO9qXSGz 5IHvHXKPKCqv2uvxG6rdDf/i8tbn7vl4fmNhAdACCe7xEd+4mV5mn4yw7OLnt279 m85CStsoCERyXix5C6FmOK8suDdqmac1paNr3QOMntz8VbC//26tHQRRsFhp/loF gB/owvuu6I7SHMD5+iXTMo6E8F+tDAWotEcAHWlGLWaYjSSqNj47e59yQQ7kE5wf tDutbQkHI8lSHe+k -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:38 2026 by rpki-client